Lucene search
Krzysztof ZającWPVDB-ID:564A66D5-7FAB-4DE0-868A-E19466A507AFHistoryJan 12, 2022 - 12:00 a.m.
PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting
2022-01-1200:00:00
Krzysztof Zając
wpscan.com
4
0.001 Low
EPSS
Percentile
30.0%
The plugin does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| powerpack-addon-for-beaver-builder | lt | 1.2.9.3 |
Related
cve
cve
CVE-2022-0176
2022-02-14 12:15:16
patchstack
patchstack
cnvd
cnvd
cvelist
cvelist
wpexploit
wpexploit
PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting
2022-01-12 00:00:00
prion
prion
Cross site scripting
2022-02-14 12:15:00
nvd
nvd
CVE-2022-0176
2022-02-14 12:15:16